[Git][security-tracker-team/security-tracker][master] Track ckeditor3 as removed from unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Apr 11 15:34:13 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
cc656688 by Salvatore Bonaccorso at 2025-04-11T16:33:05+02:00
Track ckeditor3 as removed from unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -127250,7 +127250,7 @@ CVE-2024-24816 (CKEditor4 is an open source what-you-see-is-what-you-get HTML ed
[bookworm] - ckeditor <ignored> (Minor issue, only affects shipped example files)
[bullseye] - ckeditor <no-dsa> (Minor issue)
[buster] - ckeditor <no-dsa> (Minor issue)
- - ckeditor3 <unfixed> (bug #1063537; unimportant)
+ - ckeditor3 <removed> (bug #1063537; unimportant)
[bookworm] - ckeditor3 <no-dsa> (Minor issue)
[bullseye] - ckeditor3 <no-dsa> (Minor issue)
[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -127262,7 +127262,7 @@ CVE-2024-24815 (CKEditor4 is an open source what-you-see-is-what-you-get HTML ed
[bookworm] - ckeditor <no-dsa> (Minor issue)
[bullseye] - ckeditor <no-dsa> (Minor issue)
[buster] - ckeditor <no-dsa> (Minor issue)
- - ckeditor3 <unfixed> (bug #1063537)
+ - ckeditor3 <removed> (bug #1063537)
[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
[bullseye] - ckeditor3 <no-dsa> (Minor issue)
[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -179208,7 +179208,7 @@ CVE-2023-28439 (CKEditor4 is an open source what-you-see-is-what-you-get HTML ed
[bookworm] - ckeditor <no-dsa> (Minor issue)
[bullseye] - ckeditor <no-dsa> (Minor issue)
[buster] - ckeditor <no-dsa> (Minor issue)
- - ckeditor3 <unfixed> (bug #1059301)
+ - ckeditor3 <removed> (bug #1059301)
[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
[bullseye] - ckeditor3 <no-dsa> (Minor issue)
[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -270049,7 +270049,7 @@ CVE-2022-24728 (CKEditor4 is an open source what-you-see-is-what-you-get HTML ed
- ckeditor 4.19.0+dfsg-1
[bullseye] - ckeditor <no-dsa> (Minor issue)
[buster] - ckeditor <no-dsa> (Minor issue)
- - ckeditor3 <unfixed> (bug #1015217)
+ - ckeditor3 <removed> (bug #1015217)
[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
[bullseye] - ckeditor3 <no-dsa> (Minor issue)
[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -297624,7 +297624,7 @@ CVE-2021-41165 (CKEditor4 is an open source WYSIWYG HTML editor. In affected ver
[bullseye] - ckeditor <no-dsa> (Minor issue)
[buster] - ckeditor <no-dsa> (Minor issue)
[stretch] - ckeditor <no-dsa> (Minor issue)
- - ckeditor3 <unfixed> (bug #1015217)
+ - ckeditor3 <removed> (bug #1015217)
[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
[bullseye] - ckeditor3 <no-dsa> (Minor issue)
[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -316010,7 +316010,7 @@ CVE-2021-33829 (A cross-site scripting (XSS) vulnerability in the HTML Data Proc
{DLA-2813-1}
- ckeditor 4.16.0+dfsg-2
[buster] - ckeditor <no-dsa> (Minor issue)
- - ckeditor3 <unfixed> (bug #1015217)
+ - ckeditor3 <removed> (bug #1015217)
[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
[bullseye] - ckeditor3 <no-dsa> (Minor issue)
[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -495715,7 +495715,7 @@ CVE-2018-17960 (CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a
- ckeditor 4.11.1+dfsg-1 (unimportant)
[stretch] - ckeditor <ignored> (Minor issue, XSS through direct copy/paste by victim, no identified patch)
[jessie] - ckeditor <ignored> (Minor issue)
- - ckeditor3 <unfixed> (unimportant; bug #1015217)
+ - ckeditor3 <removed> (unimportant; bug #1015217)
- fckeditor <removed>
NOTE: Negligible security impact
CVE-2018-17959
@@ -664427,7 +664427,7 @@ CVE-2014-5191 (Cross-site scripting (XSS) vulnerability in the Preview plugin be
- ckeditor 4.4.4+dfsg1-1 (bug #760736)
[wheezy] - ckeditor <not-affected> (Preview plugin not yet present)
[squeeze] - ckeditor <not-affected> (Preview plugin not yet present)
- - ckeditor3 <unfixed> (bug #1015217)
+ - ckeditor3 <removed> (bug #1015217)
[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
[bullseye] - ckeditor3 <no-dsa> (Minor issue)
[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc656688304a5486bc84594df2dd6de939bc3448
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc656688304a5486bc84594df2dd6de939bc3448
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250411/1e2d2564/attachment.htm>
More information about the debian-security-tracker-commits
mailing list